carta
urlsnarf(8)

urlsnarf8

Sniff http requests in common log format

Usage

urlsnarf [-n] [{-i interface | -p pcapfile}] [[-v] pattern [expression]]

Overview

urlsnarf outputs all requested URLs sniffed from HTTP traffic in CLF (Common Log Format, used by almost all web servers), suitable for offline post-processing with your favorite web log analysis tool (analog, wwwstat, etc.).

Options

-n

Do not resolve IP addresses to hostnames.

-i interface

Specify the interface to listen on.

-p pcapfile

Process packets from the specified PCAP capture file instead of the network.

-v

"Versus" mode. Invert the sense of matching, to select non-matching URLs. Specify the interface to listen on.

pattern

Specify regular expression for URL matching.

expression

Specify a tcpdump(8) filter expression to select traffic to sniff.

History

  • Arch Linux 2026-11-01 to Debian 4.0 (Etch): the text shown here
  • Debian 3.1 (Sarge)

-p since Debian 4.0 (Etch).

Author

Dug Song <[email protected]>

From dsniff 2.4b1-34 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.